tmp | Triage

Sharing

General

Target

tmp
Size

9.1MB
MD5

f57290a3fb2a9714e880f92a4ee1f22a
SHA1

25249086768b072a7f0649ab9fb60fa4e3eb95b6
SHA256

b3c506f89220c76008795fdb56d670380ab58d952065c891f75a8db54b84ef8e
SHA512

320bec079deeb6b91b9ba6ac868ed4af235ae863df6e3bc22b7aeba24b90ec1f78aa0c07d4497bc599448bd90f56f8c627c8c064419ab3f2293222c04cf1a9a8
SSDEEP

196608:puiEfVsQ+P5VBqvpxTle/y89BcDmwIuAOie1M:pdrnUvTm9BcDm/T

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
sample	themida

Files

tmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.themida
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE